Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

Memory Leak

🗓️ 18 Jun 2023 06:39:45Reported by Veracode Vulnerability DatabaseType 
veracode
 veracode🔗 sca.analysiscenter.veracode.com👁 19 Views

libyajl.so Memory Leak in yajl_tree_parse function vulnerabilit

Related
Detection
Refs
ReporterTitlePublishedViews
Family
ATTACKERKB		CVE-2023-33460
6 Jun 202312:15
–attackerkb
Tenable Nessus		Amazon Linux 2023 : yajl, yajl-devel (ALAS2023-2023-279)
14 Aug 202300:00
–nessus
Tenable Nessus		Amazon Linux 2 : yajl (ALAS-2023-2182)
14 Aug 202300:00
–nessus
Tenable Nessus		Alibaba Cloud Linux 3 : 0007: yajl (ALINUX3-SA-2024:0007)
14 May 202500:00
–nessus
Tenable Nessus		Alibaba Cloud Linux 3 : 0187: yajl (ALINUX3-SA-2024:0187)
14 May 202500:00
–nessus
Tenable Nessus		CentOS 8 : yajl (CESA-2023:7057)
14 Nov 202300:00
–nessus
Tenable Nessus		CentOS 9 : yajl-2.1.0-22.el9
29 Feb 202400:00
–nessus
Tenable Nessus		Debian dla-3478 : libyajl-dev - security update
2 Jul 202300:00
–nessus
Tenable Nessus		Debian dla-3492 : libyajl-dev - security update
11 Jul 202300:00
–nessus
Tenable Nessus		Debian dla-3516 : burp - security update
5 Aug 202300:00
–nessus
Rows per page
Vulners
Node
yajl_projectyajlMatch2.1.0-r7cpp
AND
yajl_projectyajlMatch2.1.0-r5cpp
AND
yajl_projectyajlMatch2.1.0-r3cpp
AND
yajl_projectyajlMatch2.1.0-r1cpp
AND
yajl_projectyajlMatch2.1.0-r4cpp
AND
yajl_projectyajlMatch2.1.0-r6cpp
AND
yajl_projectyajlMatch2.1.0-r8cpp
AND
yajl_projectyajlMatch2.1.0-r2cpp
AND
alpinelinuxalpine_linuxMatchedge
OR
yajl_projectyajlMatch2.1.0-r8cpp
AND
alpinelinuxalpine_linuxMatch3.19
OR
yajl_projectyajlMatch2.1.0-r8cpp
AND
alpinelinuxalpine_linuxMatch3.20
OR
r-cran-jsonliter-cran-jsonliteMatch1.7.1+dfsg-1debian
AND
r-cran-jsonliter-cran-jsonliteMatch1.7.2+dfsg-1debian
AND
debiandebian_linuxMatch999
OR
libyajl.solibyajl.soRange2.0.4–2.1.0cpp
SourceLink
githubwww.github.com/lloyd/yajl/issues/250
githubwww.github.com/openEuler-BaseService/yajl/commit/23a122eddaa28165a6c219000adcc31ff9a8a698
githubwww.github.com/openEuler-BaseService/yajl/issues/8
listswww.lists.debian.org/debian-lts-announce/2023/07/msg00000.html
listswww.lists.debian.org/debian-lts-announce/2023/07/msg00013.html
listswww.lists.debian.org/debian-lts-announce/2023/08/msg00003.html
listswww.lists.fedoraproject.org/archives/list/[email protected]/message/KLE3C4CECEJ4EUYI56KXI6OWACWXX7WN/
listswww.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KLE3C4CECEJ4EUYI56KXI6OWACWXX7WN/
listswww.lists.fedoraproject.org/archives/list/[email protected]/message/IBUUHG27RM4ROEYKMVRROR27AX6R63MB/
listswww.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IBUUHG27RM4ROEYKMVRROR27AX6R63MB/
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
08 Jan 2025 19:26Current
6.7Medium risk
Vulners AI Score6.7
CVSS 3.16.5
EPSS0.00204
SSVC
libyajl.somemory leakyajl_tree_parsevulnerabilityout-of-memory errorapplication crash
19